From owner-freebsd-net Wed Jan 5 20:26:22 2000 Delivered-To: freebsd-net@freebsd.org Received: from turtle.looksharp.net (cc360882-a.strhg1.mi.home.com [24.2.221.22]) by hub.freebsd.org (Postfix) with ESMTP id 004C114F7B for ; Wed, 5 Jan 2000 20:26:16 -0800 (PST) (envelope-from bsdx@looksharp.net) Received: from localhost (bsdx@localhost) by turtle.looksharp.net (8.9.3/8.9.3) with ESMTP id XAA21974; Wed, 5 Jan 2000 23:26:18 -0500 (EST) (envelope-from bsdx@looksharp.net) Date: Wed, 5 Jan 2000 23:26:18 -0500 (EST) From: Adam To: marc rassbach Cc: freebsd-net@FreeBSD.ORG Subject: Re: NAT on 2 ethernet interfaces In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I believe I've done before what you are thinking of.. I didnt use interface blah0 in mine but alias_address 24.2.221.firstip I'm pretty sure you could use interface de0 as an alternative but im pretty sure you DONT want pn0 in there. Also it looks like you have your redirect_address IP addresses reversed, you want internal then external.. eg redirect_address 192.168.1.2 24.2.221.secondip I believe thats all I did.. and just one ipfw divert I think, the one with the outside interface. On Wed, 5 Jan 2000, marc rassbach wrote: >I am having trouble making this network NAT config >to work. > >I m looking to take the next address 204.204.204.205 >to be xlated to the 192.168.10.28 machine, both >incoming and outgoing. > >I ve gotten the 192.168.10.28 box to NAT out. As >soon as tried the redirect_address, the ability for >10.28 to see the freebsd box and the net goes out >the window. > >I ve tried adding and not adding the alias to de0 of >204.204.204.205. > > >204.204.204.204 192.168.10.1 > +---------+ > Net----de0---& FreeBSD &--pn0--internal > +---------+ > >Natd.conf looks like > >log >log_denied >verbose >unregistered_only >interface pn0 >interface de0 >#redirect_address 204.204.204.205 192.168.10.28 > > > >And ipfw show looks like > >00100 0 0 allow ip from any to any via lo0 >00200 2 77 deny ip from any to 127.0.0.0/8 >00210 472601 292624231 divert 8668 ip from any to any via >pn0 >00210 473519 292659782 divert 8668 ip from any to any via >de0 >60000 946067 585279389 allow ip from any to any >65000 72 7029 allow ip from any to any > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message